Switch bugs.d.o to LE

diff --git a/modules/roles/manifests/init.pp b/modules/roles/manifests/init.pp
index d252797..2e7a357 100644 (file)
--- a/modules/roles/manifests/init.pp
+++ b/modules/roles/manifests/init.pp
@@ -45,7 +45,7 @@ class roles {
        if has_role('bugs_base') {
                ssl::service { 'bugs.debian.org':
                        notify  => Exec['service apache2 reload'],
-                       tlsaport => [],
+                       key => true,
                }
        }
        if has_role('bugs_master') {

diff --git a/modules/ssl/files/chains/bugs.debian.org.crt b/modules/ssl/files/chains/bugs.debian.org.crt
deleted file mode 120000 (symlink)
index 50d224a..0000000
--- a/modules/ssl/files/chains/bugs.debian.org.crt
+++ /dev/null
@@ -1 +0,0 @@
-GANDI-2-CA
\ No newline at end of file

diff --git a/modules/ssl/files/servicecerts/bugs.debian.org.crt b/modules/ssl/files/servicecerts/bugs.debian.org.crt
deleted file mode 100644 (file)
index ddbf9b7..0000000
--- a/modules/ssl/files/servicecerts/bugs.debian.org.crt
+++ /dev/null
@@ -1,118 +0,0 @@
-Certificate:
-    Data:
-        Version: 3 (0x2)
-        Serial Number:
-            53:8f:f0:20:bb:66:b5:f5:fe:86:cc:33:4d:ef:75:2f
-    Signature Algorithm: sha256WithRSAEncryption
-        Issuer: C=FR, ST=Paris, L=Paris, O=Gandi, CN=Gandi Standard SSL CA 2
-        Validity
-            Not Before: Dec 11 00:00:00 2015 GMT
-            Not After : Feb  3 23:59:59 2017 GMT
-        Subject: OU=Domain Control Validated, OU=Gandi Standard SSL, CN=bugs.debian.org
-        Subject Public Key Info:
-            Public Key Algorithm: rsaEncryption
-                Public-Key: (3072 bit)
-                Modulus:
-                    00:ab:cb:85:28:c6:97:5e:2e:68:5b:ee:be:4d:2b:
-                    fb:c4:c6:fc:53:94:3d:91:e5:e6:fe:68:29:9b:fb:
-                    e6:71:03:37:07:23:39:9f:96:ee:a1:15:bb:8e:da:
-                    57:6b:45:e8:14:1f:cf:ed:a6:42:62:f0:9a:96:d4:
-                    85:98:8f:fd:6a:21:9f:d4:4b:d9:67:97:b7:57:13:
-                    db:7f:e0:28:80:53:47:01:7c:56:e9:71:34:19:54:
-                    cf:7a:51:be:3a:c1:fd:b3:db:e1:b5:a4:ab:66:db:
-                    9e:bb:58:63:00:ad:bc:ac:ce:1f:c1:87:a6:ef:3d:
-                    3b:08:fd:6b:c7:bf:94:b1:02:11:27:ca:ea:f4:d9:
-                    90:47:c2:da:c7:9b:c0:72:0d:01:2c:e2:59:d6:13:
-                    d4:e3:b7:03:06:f3:2d:06:ca:7f:40:4a:56:73:68:
-                    5c:2e:3a:03:50:70:e9:99:79:de:94:1f:bb:1f:79:
-                    9c:4d:d5:bc:ab:5e:a7:c5:5a:db:76:76:b4:18:8d:
-                    ac:f8:64:b5:fa:e1:2d:9d:47:68:19:47:00:85:4e:
-                    d2:81:e5:f4:70:d4:98:e1:63:15:12:84:2a:59:ef:
-                    bf:8d:57:33:31:67:de:4b:c9:54:1e:d4:02:67:b6:
-                    2e:88:df:e4:9a:2b:b2:0e:49:ed:7e:74:60:34:b4:
-                    f9:35:a4:e4:00:76:13:b1:c7:cf:a3:a6:40:e1:f8:
-                    81:11:d0:a3:3e:05:b5:a0:77:f0:3d:0e:63:c9:8d:
-                    d6:62:a5:cb:97:65:27:a6:63:97:01:84:80:7f:c7:
-                    1b:e2:53:3e:b4:fc:0b:6a:0d:e6:83:4c:a1:79:a9:
-                    ec:d8:63:b5:dc:00:1f:c5:44:31:bc:e2:13:34:b6:
-                    3c:08:fe:17:9d:0c:aa:98:d0:eb:62:e4:14:93:4b:
-                    e8:54:59:38:e2:a6:e0:a1:c7:3d:2f:13:44:be:31:
-                    71:da:4f:b0:54:95:df:69:c4:74:5a:e8:0c:c8:31:
-                    bb:8d:52:c7:7c:e3:ba:51:7b:a7
-                Exponent: 65537 (0x10001)
-        X509v3 extensions:
-            X509v3 Authority Key Identifier: 
-                keyid:B3:90:A7:D8:C9:AF:4E:CD:61:3C:9F:7C:AD:5D:7F:41:FD:69:30:EA
-
-            X509v3 Subject Key Identifier: 
-                DF:CB:C3:B0:AF:7B:CE:34:89:32:55:AC:97:2C:0B:B2:EE:7D:20:E2
-            X509v3 Key Usage: critical
-                Digital Signature, Key Encipherment
-            X509v3 Basic Constraints: critical
-                CA:FALSE
-            X509v3 Extended Key Usage: 
-                TLS Web Server Authentication, TLS Web Client Authentication
-            X509v3 Certificate Policies: 
-                Policy: 1.3.6.1.4.1.6449.1.2.2.26
-                  CPS: https://cps.usertrust.com
-                Policy: 2.23.140.1.2.1
-
-            X509v3 CRL Distribution Points: 
-
-                Full Name:
-                  URI:http://crl.usertrust.com/GandiStandardSSLCA2.crl
-
-            Authority Information Access: 
-                CA Issuers - URI:http://crt.usertrust.com/GandiStandardSSLCA2.crt
-                OCSP - URI:http://ocsp.usertrust.com
-
-            X509v3 Subject Alternative Name: 
-                DNS:bugs.debian.org, DNS:www.bugs.debian.org
-    Signature Algorithm: sha256WithRSAEncryption
-         09:3c:f3:06:bd:5a:23:f8:05:ed:45:53:27:90:a1:4c:0b:a9:
-         70:a9:50:2f:90:d1:de:e3:48:35:a6:ba:59:b5:cb:b3:9d:a6:
-         20:e8:a4:6b:fb:d8:68:63:d9:3b:fc:70:e2:a3:d0:98:7a:21:
-         29:87:82:e6:37:af:19:20:d6:9e:5c:0e:c6:3a:27:28:74:ee:
-         d1:1f:b1:e4:b7:26:a0:ab:bb:92:77:9d:a7:1a:98:56:e3:ef:
-         8e:f9:83:82:85:d1:12:35:a2:18:19:09:f7:2d:c9:72:30:67:
-         bf:af:71:91:55:5a:d9:6e:75:8b:d1:1d:14:ca:20:a5:a9:ea:
-         bc:fd:89:a9:f6:93:e2:57:bb:31:4c:13:27:99:14:a5:5e:6b:
-         bd:51:2e:7a:97:46:ed:1b:e1:cf:24:12:25:af:60:bb:ed:b7:
-         a5:73:eb:94:a3:c2:76:b4:59:c6:67:fe:72:e6:11:97:e3:7a:
-         12:40:f8:73:ac:a5:de:65:b8:4f:0c:dd:15:5d:74:7c:ff:97:
-         6a:25:6a:17:45:28:d4:c8:66:23:4b:11:75:be:fb:9d:96:79:
-         fc:7b:3d:63:71:7c:48:43:b9:e3:bc:55:f1:f7:bf:be:4f:3b:
-         c9:0d:2f:c7:88:13:39:f2:36:6e:98:78:43:f3:d7:ef:0c:2f:
-         90:f4:9c:08
------BEGIN CERTIFICATE-----
-MIIFfDCCBGSgAwIBAgIQU4/wILtmtfX+hswzTe91LzANBgkqhkiG9w0BAQsFADBf
-MQswCQYDVQQGEwJGUjEOMAwGA1UECBMFUGFyaXMxDjAMBgNVBAcTBVBhcmlzMQ4w
-DAYDVQQKEwVHYW5kaTEgMB4GA1UEAxMXR2FuZGkgU3RhbmRhcmQgU1NMIENBIDIw
-HhcNMTUxMjExMDAwMDAwWhcNMTcwMjAzMjM1OTU5WjBaMSEwHwYDVQQLExhEb21h
-aW4gQ29udHJvbCBWYWxpZGF0ZWQxGzAZBgNVBAsTEkdhbmRpIFN0YW5kYXJkIFNT
-TDEYMBYGA1UEAxMPYnVncy5kZWJpYW4ub3JnMIIBojANBgkqhkiG9w0BAQEFAAOC
-AY8AMIIBigKCAYEAq8uFKMaXXi5oW+6+TSv7xMb8U5Q9keXm/mgpm/vmcQM3ByM5
-n5buoRW7jtpXa0XoFB/P7aZCYvCaltSFmI/9aiGf1EvZZ5e3VxPbf+AogFNHAXxW
-6XE0GVTPelG+OsH9s9vhtaSrZtueu1hjAK28rM4fwYem7z07CP1rx7+UsQIRJ8rq
-9NmQR8Lax5vAcg0BLOJZ1hPU47cDBvMtBsp/QEpWc2hcLjoDUHDpmXnelB+7H3mc
-TdW8q16nxVrbdna0GI2s+GS1+uEtnUdoGUcAhU7SgeX0cNSY4WMVEoQqWe+/jVcz
-MWfeS8lUHtQCZ7YuiN/kmiuyDkntfnRgNLT5NaTkAHYTscfPo6ZA4fiBEdCjPgW1
-oHfwPQ5jyY3WYqXLl2UnpmOXAYSAf8cb4lM+tPwLag3mg0yheans2GO13AAfxUQx
-vOITNLY8CP4XnQyqmNDrYuQUk0voVFk44qbgocc9LxNEvjFx2k+wVJXfacR0WugM
-yDG7jVLHfOO6UXunAgMBAAGjggG3MIIBszAfBgNVHSMEGDAWgBSzkKfYya9OzWE8
-n3ytXX9B/Wkw6jAdBgNVHQ4EFgQU38vDsK97zjSJMlWslywLsu59IOIwDgYDVR0P
-AQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG
-AQUFBwMCMEsGA1UdIAREMEIwNgYLKwYBBAGyMQECAhowJzAlBggrBgEFBQcCARYZ
-aHR0cHM6Ly9jcHMudXNlcnRydXN0LmNvbTAIBgZngQwBAgEwQQYDVR0fBDowODA2
-oDSgMoYwaHR0cDovL2NybC51c2VydHJ1c3QuY29tL0dhbmRpU3RhbmRhcmRTU0xD
-QTIuY3JsMHMGCCsGAQUFBwEBBGcwZTA8BggrBgEFBQcwAoYwaHR0cDovL2NydC51
-c2VydHJ1c3QuY29tL0dhbmRpU3RhbmRhcmRTU0xDQTIuY3J0MCUGCCsGAQUFBzAB
-hhlodHRwOi8vb2NzcC51c2VydHJ1c3QuY29tMC8GA1UdEQQoMCaCD2J1Z3MuZGVi
-aWFuLm9yZ4ITd3d3LmJ1Z3MuZGViaWFuLm9yZzANBgkqhkiG9w0BAQsFAAOCAQEA
-CTzzBr1aI/gF7UVTJ5ChTAupcKlQL5DR3uNINaa6WbXLs52mIOika/vYaGPZO/xw
-4qPQmHohKYeC5jevGSDWnlwOxjonKHTu0R+x5LcmoKu7knedpxqYVuPvjvmDgoXR
-EjWiGBkJ9y3JcjBnv69xkVVa2W51i9EdFMogpanqvP2JqfaT4le7MUwTJ5kUpV5r
-vVEuepdG7RvhzyQSJa9gu+23pXPrlKPCdrRZxmf+cuYRl+N6EkD4c6yl3mW4Twzd
-FV10fP+XaiVqF0Uo1MhmI0sRdb77nZZ5/Hs9Y3F8SEO547xV8fe/vk87yQ0vx4gT
-OfI2bph4Q/PX7wwvkPScCA==
------END CERTIFICATE-----